Privacy Policy

Important: this is a starter privacy policy and should be tailored to your real hosting, analytics, payment, email and support stack.

1. Data controller

JININO Ltd / site owner is the controller for user account and platform data.

2. Data collected

Account details, professional profile details, CPD entries, calendar content, finance entries, uploaded documents, support requests, review submissions, optional Password Keeper ciphertext/metadata, and limited authenticated usage totals such as login counts, last login, page-view totals and approximate active time.

2A. Product usage and account audit

For signed-in users, JININO keeps operational usage information so the service owner can understand adoption, troubleshoot the product and protect the service. This can include account creation, successful sign-ins, broad workspace sections visited, approximate active time, and whether a user added, updated or deleted a JININO record such as a task, CPD entry, process, document, renewal or finance record. The audit trail stores a short record label where available, but does not copy free-text note bodies, reflection text, uploaded document contents, passwords, Password Keeper secrets, raw IP addresses or full user-agent strings into the analytics report.

3. Why data is used

To provide the service, maintain security, deliver reminders, improve the platform, manage billing and communicate product updates.

3A. Password Keeper

When the optional Password Keeper is used, JININO stores workplace/credential labels plus encrypted ciphertext, salt and IV. Secret username/password/URL/private-note fields are encrypted in the user’s browser using a vault passphrase that JININO does not store.

4. Legal bases

Contract, legitimate interests, consent where required, and legal obligations where applicable.

5. Sharing

Data may be shared with hosting, email, payment and infrastructure providers strictly as needed to operate JININO.

5A. Public-site advertising

Selected public JININO pages may use Google AdSense. Advertising is kept separate from authenticated professional workspace pages. Where required, advertising-related consent is managed before optional advertising purposes are enabled.

6. Retention

Data is kept only as long as needed for the platform, legal compliance and legitimate operational purposes.

7. User rights

Users may request access, correction, deletion, restriction, objection and portability where applicable under UK GDPR.